Experimental News Clipping Site

Tag: uth

  • Embrace The Red: Turning ChatGPT Codex Into A ZombAI Agent

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/chatgpt-codex-remote-control-zombai/ Source: Embrace The Red Title: Turning ChatGPT Codex Into A ZombAI Agent Feedly Summary: Today we cover ChatGPT Codex as part of the Month of AI Bugs series. ChatGPT Codex is a cloud-based software engineering agent that answers codebase questions, executes code, and drafts pull requests. In particular, this post will demonstrate…

  • Simon Willison’s Weblog: Faster inference

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/1/faster-inference/ Source: Simon Willison’s Weblog Title: Faster inference Feedly Summary: Two interesting examples of inference speed as a flagship feature of LLM services today. First, Cerebras announced two new monthly plans for their extremely high speed hosted model service: Cerebras Code Pro ($50/month, 1,000 messages a day) and Cerebras Code Max ($200/month, 5,000/day).…

  • The Register: China says US spies exploited Microsoft Exchange zero-day to steal military info

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/01/china_us_intel_attacks/ Source: The Register Title: China says US spies exploited Microsoft Exchange zero-day to steal military info Feedly Summary: Spy vs. spy China has accused US intelligence agencies of exploiting a Microsoft Exchange zero-day exploit to steal defense-related data and take over more than 50 devices belonging to a “major Chinese military enterprise"…

  • Embrace The Red: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/chatgpt-chat-history-data-exfiltration/ Source: Embrace The Red Title: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Feedly Summary: In this post we demonstrate how a bypass in OpenAI’s “safe URL” rendering feature allows ChatGPT to send personal information to a third-party server. This can be exploited by an adversary via a prompt injection…

  • The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

  • Scott Logic: Automated permissions testing with AWS IAM Policy Simulator

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.scottlogic.com/2025/08/01/automated-iam-policy-simulator-testing.html Source: Scott Logic Title: Automated permissions testing with AWS IAM Policy Simulator Feedly Summary: A quick guide to implementing a test framework for IAM permissions using the AWS IAM Policy Simulator API and a tiny hack. AI Summary and Description: Yes Summary: The provided text extensively discusses a workaround for using AWS…

  • Slashdot: In Search of Riches, Hackers Plant 4G-Enabled Raspberry Pi In Bank Network

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/07/31/2241259/in-search-of-riches-hackers-plant-4g-enabled-raspberry-pi-in-bank-network?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: In Search of Riches, Hackers Plant 4G-Enabled Raspberry Pi In Bank Network Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a sophisticated cyber-physical attack by the group UNC2891, which involved planting a 4G-enabled Raspberry Pi within a bank’s ATM network. Utilizing advanced malware and techniques for…

  • Anton on Security – Medium: Google Cloud Security Threat Horizons Report #12 Is Out!

    —

    by

    Kurt Seifried
    in

    Source URL: https://medium.com/anton-on-security/google-cloud-security-threat-horizons-report-12-is-out-6e84e700467f?source=rss—-8e8c3ed26c4c—4 Source: Anton on Security – Medium Title: Google Cloud Security Threat Horizons Report #12 Is Out! Feedly Summary: AI Summary and Description: Yes Summary: The text discusses insights from Google Cloud’s Threat Horizons Report #12, focusing on key security vulnerabilities in cloud environments. It highlights the persistent exploitation of issues like credential…

  • Cisco Talos Blog: The Booker Prize Longlist and Hacker Summer Camp

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/the-booker-prize-longlist-and-hacker-summer-camp/ Source: Cisco Talos Blog Title: The Booker Prize Longlist and Hacker Summer Camp Feedly Summary: This week Bill connects the hype of literary awards to cybersecurity conference season. We highlight key insights from the Q2 2025 IR Trends report, including phishing trends, new ransomware strains, and top targeted sectors. Finally, check out…

  • Docker: MCP Horror Stories: The Security Issues Threatening AI Infrastructure

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/mcp-security-issues-threatening-ai-infrastructure/ Source: Docker Title: MCP Horror Stories: The Security Issues Threatening AI Infrastructure Feedly Summary: This is issue 1 of a new series – MCP Horror Stories – where we will examine critical security issues and vulnerabilities in the Model Context Protocol (MCP) ecosystem and how Docker MCP Toolkit provides enterprise-grade protection against…